drop mfp scan-to-email audit · parse recipient + attachment events · runs locally
mfp scan-to-email audit · csv/json · local only
heuristic screener · vendor schema varies · not definitive proof